Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier: ho8cT9VQLW/6fLNYnqLLJm5VD77i7QUZ/Jcbq9lKcXU=
Subject key identifier: F2:0D:F8:1F:5E:7D:5A:2A:8B:B5:34:48:B1:7B:7F:A8:EF:4E:A4:EB
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial: 019921B14D71E92B7F4A81A98D60D756E1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 01:01:31 +0000
Manifest this update: Sun 07 Sep 2025 01:01:31 +0000
Manifest next update: Mon 08 Sep 2025 01:01:31 +0000
Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: zf2EgbFcbUwKxj5pZBh34uy1IqPESHC3KICndgiSZC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:4d:71:e9:2b:7f:4a:81:a9:8d:60:d7:56:e1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Validity
Not Before: Sep 7 01:01:31 2025 GMT
Not After : Sep 8 01:01:31 2025 GMT
Subject: CN=f20df81f5e7d5a2a8bb53448b17b7fa8ef4ea4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:19:f2:d6:67:d4:2b:c1:f0:60:1a:65:4d:
70:85:12:93:1d:2d:99:c2:63:68:88:48:5a:91:1d:
c7:6c:08:a0:85:98:61:e7:5a:74:08:dc:9b:bf:0b:
a4:d8:46:2b:ce:f0:39:db:a7:50:23:f2:9f:69:1b:
93:bb:c6:72:76:5d:98:ec:d1:59:77:69:21:d6:c1:
6a:73:11:78:85:59:93:6c:45:91:b4:8e:8b:ab:93:
8d:e1:e3:af:a8:50:49:d0:95:27:0b:db:d7:91:48:
53:2b:a3:fd:8c:59:3b:f8:ae:19:68:0b:35:e2:bf:
cd:c0:54:4b:39:4f:d1:9f:09:d0:eb:66:1a:1a:9e:
d0:1c:c1:d1:06:1b:26:e5:9a:7f:72:f7:d5:b8:54:
c3:3f:a3:54:90:a0:7a:ba:e2:20:28:9e:b8:a8:4f:
db:6e:8a:bd:19:15:9b:ea:07:8e:e0:66:d0:3f:f0:
0f:c4:56:05:f4:10:75:bc:ae:5a:06:00:8a:9d:76:
bb:a5:29:3c:23:4d:ba:b4:cf:fe:d4:4b:dd:09:af:
fb:d5:1d:f3:59:5d:80:40:92:25:24:b7:b2:83:e3:
c0:1e:02:a2:8a:55:54:c3:e0:b3:42:c4:f9:db:4a:
47:7e:25:e6:21:5d:b6:50:12:70:83:98:91:2e:79:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0D:F8:1F:5E:7D:5A:2A:8B:B5:34:48:B1:7B:7F:A8:EF:4E:A4:EB
X509v3 Authority Key Identifier:
keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2e:7a:ac:42:63:a3:ab:4f:86:7a:69:ef:46:9b:92:d1:5a:
ce:bc:3e:15:8b:50:80:3b:50:fa:71:9b:87:fe:6f:9c:da:82:
c9:84:e5:26:33:19:68:89:10:3c:7b:d3:b0:4c:23:ef:81:c4:
b6:b5:c9:5b:03:65:45:34:fd:37:18:4d:eb:94:ca:79:96:e6:
ce:a0:de:ad:65:cd:08:43:08:f5:f0:4f:a1:54:ca:ea:f3:73:
2f:80:2a:4a:1b:d1:dc:04:26:2f:54:24:11:d6:3d:4c:4a:73:
e8:49:45:99:25:53:3e:dd:c3:91:5a:4a:a0:f7:d0:b9:71:36:
98:36:ed:fa:e0:ef:d9:30:d7:25:7f:ec:42:af:dc:eb:9c:c7:
1c:64:fe:69:c2:54:26:2e:b4:1a:b4:2d:0a:f1:1a:15:00:0d:
52:ad:3b:be:f8:27:16:1c:6f:11:35:bb:39:02:65:31:c3:99:
14:02:e3:1a:5e:75:fb:38:0a:2b:64:3a:dc:02:d9:4a:3f:a0:
48:74:fe:58:a5:d9:8c:76:6e:c4:d5:5d:c2:b3:7d:f3:ea:89:
2e:fa:68:77:f2:02:05:12:35:a4:3e:9f:32:e3:f1:1d:7f:5f:
f7:a2:cd:31:68:71:2d:46:0e:c5:59:a0:6d:fb:06:e9:5a:02:
95:a1:f9:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsU1x6St/SoGpjWDXVuHfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzU0MTcyNWI3MjhiNWE4OWYzYmZhZjIwZjg3NjU1NjNj
MmYzZmIwHhcNMjUwOTA3MDEwMTMxWhcNMjUwOTA4MDEwMTMxWjAzMTEwLwYDVQQD
EyhmMjBkZjgxZjVlN2Q1YTJhOGJiNTM0NDhiMTdiN2ZhOGVmNGVhNGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX8Z8tZn1CvB8GAaZU1whRKTHS2Z
wmNoiEhakR3HbAighZhh51p0CNybvwuk2EYrzvA526dQI/KfaRuTu8Zydl2Y7NFZ
d2kh1sFqcxF4hVmTbEWRtI6Lq5ON4eOvqFBJ0JUnC9vXkUhTK6P9jFk7+K4ZaAs1
4r/NwFRLOU/RnwnQ62YaGp7QHMHRBhsm5Zp/cvfVuFTDP6NUkKB6uuIgKJ64qE/b
boq9GRWb6geO4GbQP/APxFYF9BB1vK5aBgCKnXa7pSk8I026tM/+1EvdCa/71R3z
WV2AQJIlJLeyg+PAHgKiilVUw+CzQsT520pHfiXmIV22UBJwg5iRLnk4rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIN+B9efVoqi7U0SLF7f6jvTqTrMB8GA1UdIwQY
MBaAFNp1QXJbcotaifO/ryD4dlVjwvP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMt
ZGI4ZmQ1MDdkMWI2LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMtZGI4ZmQ1MDdkMWI2
LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy56rEJj
o6tPhnpp70abktFazrw+FYtQgDtQ+nGbh/5vnNqCyYTlJjMZaIkQPHvTsEwj74HE
trXJWwNlRTT9NxhN65TKeZbmzqDerWXNCEMI9fBPoVTK6vNzL4AqShvR3AQmL1Qk
EdY9TEpz6ElFmSVTPt3DkVpKoPfQuXE2mDbt+uDv2TDXJX/sQq/c65zHHGT+acJU
Ji60GrQtCvEaFQANUq07vvgnFhxvETW7OQJlMcOZFALjGl51+zgKK2Q63ALZSj+g
SHT+WKXZjHZuxNVdwrN98+qJLvpod/ICBRI1pD6fMuPxHX9f96LNMWhxLUYOxVmg
bfsG6VoClaH5Aw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:07 2025 by rpki-client